Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Phishing attacks impersonating HR are on the rise. Between January 1 – March 31, 2025, our Threat Lab team observed an 120% surge in these attacks reported via our PhishER product versus the previous three months. These attacks have remained at elevated levels since peaking in February. (FYI in our previous post, we explored the psychology that makes these attacks so effective.

We all trust HR - or at least we do when we think they’re emailing us! Data from KnowBe4’s HRM+ platform reveals that phishing simulations with internal subject lines dominate the list of most-clicked templates in 2025. Out of the top 10 templates people interacted with between May 1 - June 30, 2025, an incredible 98.4% had subject lines relating to internal topics - with HR mentioned in 45.2%.

The average cost of a data breach has reached $4.45 million globally (IBM, 2023). While most organizations invest heavily in firewalls, endpoint protection, and network monitoring, those defenses focus almost entirely on keeping threats out. The reality is different: over 70% of breaches involve human error or misuse. That means many of the most serious risks are already inside your systems. This is where employee monitoring data protection strategies make a difference.

Between June and August 2025, the CrowdStrike Falcon platform successfully blocked a sophisticated malware campaign that attempted to compromise over 300 customer environments. The campaign deployed SHAMOS, a variant of Atomic macOS Stealer (AMOS) developed by the cybercriminal group COOKIE SPIDER. Operating as malware-as-a-service, COOKIE SPIDER rents this information stealer to cybercriminals who deploy it to harvest sensitive information and cryptocurrency assets from victims.

UnitedHealth was established as CharterMed Incorporated in 1974 in Minnesota by Richard Burke and a team of healthcare professionals. It was reorganized and renamed UnitedHealth in 1998, indicating diversity from typical insurance services to incorporate more healthcare options. At present, UnitedHealth operates as the Healthcare branch, which offers health insurance coverage, and Optum, which affords tech-centered health services.

In the first blog of the KMM series, we introduced Kotlin Multiplatform Mobile (KMM) and its cross-platform advantages. In this part, we go deeper into mobile security in KMM apps, focusing on: But, before that, let’s quickly recap what KMM is. Kotlin Multiplatform Mobile (KMM) enables developers to write shared code for both Android and iOS, while still maintaining platform-specific implementations where necessary. For the sake of simplicity, we have divided this blog into two sections.

Secrets sprawl refers to the insecure spread of credentials, tokens, keys and other sensitive information across codebases, cloud services and infrastructure. It introduces significant operational and security challenges, including weak points in CI/CD pipelines, limited visibility into where secrets are stored, error-prone manual rotation processes and a higher risk of compliance failures.

Cybersecurity tools are only as strong as the humans who use them. Training, culture, and awareness shape how individuals interact with those systems and whether they succeed. This is especially true when it comes to fraud prevention. While firewalls and encryption protocols can block many external threats, they can’t stop an employee from clicking on a fraudulent invoice, wiring money to a spoofed account, or falling for a phishing scam.

Creating and implementing information security policies (ISPs) may seem like a formality to some. However, ISPs form the backbone of your data security posture. Information security policies and procedures can help you prevent data breaches, legal penalties, and financial losses by defining what’s allowed within your organization and what’s not. Developing an efficient security policy can seem like a lengthy and daunting task.